CVE-2020-36647

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in YunoHost-Apps transmission_ynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to fix this issue. VDB-217638 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Jan 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-366489.8A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the ar CVE-2020-366497.5A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file CVE-2020-36657.8A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of ra CVE-2020-366508.0A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulati CVE-2020-366517.5A vulnerability has been found in youngerheart nodeserver and classified as critical. Affected by this vulnerability is an unknown functiona CVE-2020-366527.1Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hita CVE-2020-366536.1A vulnerability was found in GENI Portal. It has been rated as problematic. Affected by this issue is some unknown functionality of the file CVE-2020-366546.1A vulnerability classified as problematic has been found in GENI Portal. This affects the function no_invocation_id_error of the file portal CVE-2020-366558.8Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can em CVE-2020-366565.4The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to con CVE-2020-366577.8uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard li CVE-2020-366588.1In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, be